This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/2/326130663a316363353a313630303a3a2f34302d3438203d3e20313939333130.roa File: 326130663a316363353a313630303a3a2f34302d3438203d3e20313939333130.roa (raw, json) Hash identifier: oRud3MAKc35BhPQ/dECbRR4jBQu+j+D0nvvbv3UFhqw= Subject key identifier: 90:D6:F8:F1:6D:3A:6B:BD:FB:2E:00:9F:C7:5F:B9:35:E5:22:71:F2 Certificate issuer: /CN=514B8293389DEFDD9849D045DD45ECCF576747FA Certificate serial: B800984BE5826A1B796525B69F14836F784B07 Authority key identifier: 51:4B:82:93:38:9D:EF:DD:98:49:D0:45:DD:45:EC:CF:57:67:47:FA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/514B8293389DEFDD9849D045DD45ECCF576747FA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/2/326130663a316363353a313630303a3a2f34302d3438203d3e20313939333130.roa Signing time: Sun 14 Dec 2025 08:58:40 +0000 ROA not before: Sun 14 Dec 2025 08:53:40 +0000 ROA not after: Sun 13 Dec 2026 08:58:40 +0000 asID: 199310 IP address blocks: 2a0f:1cc5:1600::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/2/514B8293389DEFDD9849D045DD45ECCF576747FA.crl rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/2/514B8293389DEFDD9849D045DD45ECCF576747FA.mft rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/514B8293389DEFDD9849D045DD45ECCF576747FA.cer rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: b8:00:98:4b:e5:82:6a:1b:79:65:25:b6:9f:14:83:6f:78:4b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=514B8293389DEFDD9849D045DD45ECCF576747FA Validity Not Before: Dec 14 08:53:40 2025 GMT Not After : Dec 13 08:58:40 2026 GMT Subject: CN=90D6F8F16D3A6BBDFB2E009FC75FB935E52271F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:14:56:60:77:c9:a4:14:5d:13:62:13:8e:27: e7:eb:dd:e9:9f:86:68:2a:88:10:c4:c3:29:bb:09: 4c:8c:6b:fa:85:74:8c:86:9e:59:4e:83:39:82:fd: fb:a5:24:8b:00:9d:94:d7:13:31:af:59:f7:9d:d9: b1:09:01:c4:6c:98:d3:1e:35:53:ec:e1:a9:e2:be: 39:2b:1f:43:a3:56:67:53:36:7f:db:21:ce:a8:3c: 44:9c:b4:9d:73:18:2c:2d:bd:27:11:d3:de:9e:36: 4e:15:9a:58:70:28:f8:0a:f6:7a:df:9b:71:df:81: 5b:df:ad:fb:4b:7e:0f:c0:15:a7:4a:04:18:35:21: e8:dc:52:57:ee:05:9e:38:2f:03:4e:31:3a:36:ff: 8a:86:d9:1c:c0:da:67:4e:d8:60:f4:1b:7e:10:66: b3:20:96:5d:78:38:87:6a:c6:5f:be:0b:a3:6f:c3: f8:2c:dc:be:e0:64:63:68:84:66:1f:16:08:5b:e8: 64:d2:b9:9e:b7:0c:af:20:1d:61:0a:8f:d7:2b:be: 18:6b:81:7c:2d:a3:ee:8c:ef:ec:5b:15:3a:27:46: a9:ce:9d:07:b2:6d:fb:1d:7a:eb:9a:20:88:90:63: 49:55:1a:cb:4e:c4:8d:cb:c7:6c:2f:49:d8:e8:4b: fa:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D6:F8:F1:6D:3A:6B:BD:FB:2E:00:9F:C7:5F:B9:35:E5:22:71:F2 X509v3 Authority Key Identifier: keyid:51:4B:82:93:38:9D:EF:DD:98:49:D0:45:DD:45:EC:CF:57:67:47:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/2/514B8293389DEFDD9849D045DD45ECCF576747FA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/514B8293389DEFDD9849D045DD45ECCF576747FA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/2/326130663a316363353a313630303a3a2f34302d3438203d3e20313939333130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:1600::/40 Signature Algorithm: sha256WithRSAEncryption 7f:b8:9f:62:4b:44:8d:9e:55:0d:31:bf:cd:46:a2:c4:80:38: a7:fc:f2:ba:14:f3:9f:58:49:30:e4:e7:fd:2c:9f:68:aa:c0: 98:29:6d:e0:77:43:a0:c6:e5:67:00:be:d4:fc:be:f7:8d:14: 07:56:35:b5:c2:f9:8c:2b:ee:98:64:aa:22:74:59:31:3e:30: 83:fa:93:6b:a2:03:38:1f:a4:24:e8:f2:65:2e:bf:ad:1b:64: eb:23:01:20:4f:0a:42:90:8e:53:0e:2f:07:53:6a:12:3b:f8: 04:1d:e7:33:6f:c3:cb:cd:a0:56:30:a2:cd:cd:21:5c:83:0f: 93:00:dc:f3:4d:fe:85:c4:42:8d:45:5f:2f:00:8a:fa:1e:50: af:64:56:bb:a5:b9:03:93:26:8d:aa:42:0d:f5:5c:ff:5f:86: 72:04:f2:3e:39:8b:8e:bf:cb:ac:27:09:36:4f:22:d4:c7:85: d2:00:ac:93:f5:da:6b:41:27:e2:d5:46:12:be:16:bf:2a:25: 07:27:29:48:a6:a5:c9:ab:3c:99:9f:88:72:44:93:ea:d8:5c: e0:d5:09:ac:77:b3:16:c4:76:88:1c:ac:f3:89:56:dd:05:a5: f5:44:e8:dc:70:92:c1:be:e3:95:f5:30:04:12:02:44:6a:8d: 34:e6:28:e4 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUALgAmEvlgmobeWUltp8Ug294SwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE0QjgyOTMzODlERUZERDk4NDlEMDQ1REQ0NUVDQ0Y1 NzY3NDdGQTAeFw0yNTEyMTQwODUzNDBaFw0yNjEyMTMwODU4NDBaMDMxMTAvBgNV BAMTKDkwRDZGOEYxNkQzQTZCQkRGQjJFMDA5RkM3NUZCOTM1RTUyMjcxRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqFFZgd8mkFF0TYhOOJ+fr3emf hmgqiBDEwym7CUyMa/qFdIyGnllOgzmC/fulJIsAnZTXEzGvWfed2bEJAcRsmNMe NVPs4anivjkrH0OjVmdTNn/bIc6oPESctJ1zGCwtvScR096eNk4VmlhwKPgK9nrf m3HfgVvfrftLfg/AFadKBBg1IejcUlfuBZ44LwNOMTo2/4qG2RzA2mdO2GD0G34Q ZrMgll14OIdqxl++C6Nvw/gs3L7gZGNohGYfFghb6GTSuZ63DK8gHWEKj9crvhhr gXwto+6M7+xbFTonRqnOnQeybfsdeuuaIIiQY0lVGstOxI3Lx2wvSdjoS/olAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUkNb48W06a737LgCfx1+5NeUicfIwHwYDVR0j BBgwFoAUUUuCkzid792YSdBF3UXsz1dnR/owDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE1NzY0N2MtOTFkNi00YTA0LThhOTEtZDE1Mzg1ZDFm YWIyLzIvNTE0QjgyOTMzODlERUZERDk4NDlEMDQ1REQ0NUVDQ0Y1NzY3NDdGQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC81MTRCODI5MzM4OURFRkREOTg0OUQwNDVE RDQ1RUNDRjU3Njc0N0ZBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wMTU3NjQ3Yy05MWQ2LTRhMDQtOGE5MS1kMTUzODVkMWZhYjIvMi8zMjYxMzA2 NjNhMzE2MzYzMzUzYTMxMzYzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzEz OTM5MzMzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKg8cxRYwDQYJKoZIhvcNAQELBQADggEBAH+4 n2JLRI2eVQ0xv81GosSAOKf88roU859YSTDk5/0sn2iqwJgpbeB3Q6DG5WcAvtT8 vveNFAdWNbXC+Ywr7phkqiJ0WTE+MIP6k2uiAzgfpCTo8mUuv60bZOsjASBPCkKQ jlMOLwdTahI7+AQd5zNvw8vNoFYwos3NIVyDD5MA3PNN/oXEQo1FXy8AivoeUK9k VruluQOTJo2qQg31XP9fhnIE8j45i46/y6wnCTZPItTHhdIArJP12mtBJ+LVRhK+ Fr8qJQcnKUimpcmrPJmfiHJEk+rYXODVCax3sxbEdogcrPOJVt0FpfVE6NxwksG+ 45X1MAQSAkRqjTTmKOQ= -----END CERTIFICATE-----Generated at Thu Dec 18 20:29:55 2025 by rpki-client